Summary: Cross-site Scripting (XSS) in EasyXDM before 2.4.18 allows remote attackers to inject arbitrary web script or html via the easyxdm.swf file.Published: Friday, February 14, 2020 - 00:15cvss: 5.0